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IN THE CLAIMS 

What is claimed is: 

v l . A method for sending a secure e-mail, comprising the steps of: 

(a) composing an e-mail message by a sender, wherein said e-mail message includes a 
body field and at least one receiver field containing at least one receiver id 
representing at least one intended receiver; 
providing a sender id, a sender password, and all said receiver ids to a security server; 

(c) receiving a message key and a message id which is unique for said e-mail message 
rom said security server; 

(d) encrypting said body field of said e-mail message based on said message key and 

enclosing said message id therewith to form the secure e-mail; 

(e) mailing saichsecure e-mail in conventional manner to said receivers; and 

(f) storing said message id, said message key, and all said receiver ids at said security 

server, to allow said security server to provide said message key to said receivers 
so that they maydecrypt and read the secure e-mail. 

2. The method of claim 1, wherein: 

in said step (a) said e-mail message further includes a subject field; and 
said step (d) includes encrypting said subject field. 

3. The method of claim 1, wherein said sender id is associated with an e-mail address for 
said sender. 

4. The method of claim 1, wherein said sender password is derived from a private password 
provided by said sender, to permit said sender to maintaik said private password as private. 

5. The method of claim 1, wherein said sender password^as been previously stored for said 
sender. 



6. The method of claim 1, further comprising authenticating said^sender based on said 
sender id and said sender password after said step (b) and prior to proceeding with said step (c). 
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7. The methocho^claim 1, wherein said step (d) encrypts using a symmetric key encryption 
algorithm. 



8. The method of claim 
said step (e) includes 
the method further composing 
resolving said receiver 
allow said 
receivers 



1, wherein: 

mailing to at least one said receiver which is a receiver list; and 

list into a plurality of said receiver ids for said security server, to 
security server to provide said message key to instances of said 
which are members of said receiver list. 



The method of claim 1 , further comprising: 
id step (b) includes providing a message hash based on said e-mail message to said 
security server; and 

includes receiving a first message seal from said security server based on 
said mes&^ge hash; and 
said step (d) includes^a^closing the first message seal with the secure e-mail, to permit 
said security serverfeQmparing said first message seal with a second message seal 
taken from the secure e-maH as received to determine whether the secure e-mail 
has been altered while in transiKp said receiver. 




10. The method of claam 1, wherein at least one of said steps (b) and (c) employs secure 
socket layer protocol in communications with said security service. 



1 1 . N }\method for receiving a secure e-mail, comprising the steps of: 

(a) a^pting the secure e-mail by a receiver, wherein the secure e-mail includes a body 
that is encrypted and a message id that uniquely identifies the secure e-mail; 

(b) providing saiiKmessage id as well as a receiver id and a receiver password for said 
receiver to a security server; 

(c) receiving a message key nwn said security server; and 
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(d) decrypting the secure e-mail based on said message key, to form an e-mail message 
which is readable by said receiver. 

12. Th^Smethod of claim 1 1 , wherein: 

in saickstep (a) said secure e-mail further includes a subject field that is also encrypted; 
\d 

said step (aj) includes decrypting said subject field. 

13. The method of\laim 11, wherein said receiver id is associated with an e-mail address for 
said receiver. 

14. The method of claim N, wherein said receiver password is derived from a private 
password provided by said recei\er, to permit said receiver to maintain said private password as 
private. 

15. The method of claim 11, whereS^i said receiver password has been previously stored for 
said receiver. 

16. The method of claim 11, further comprising authenticating said receiver based on said 
receiver id and said receiver password after saia^tep (b) and prior to proceeding with said step 
(c). 



17. The method of claim 11, wherein said step (d) decrypts using a symmetric key decryption 
algorithm. 



x\n 11, 



18. The method of claipi 1 1 , wherein: 

the secure e-mail as sent by a sender and a first message seal based on the secure e-mail 

before it le t control of said sender is stored by said security server; 
said step (b) furthe r includes also providing to said security server a second message seal 
which is ta^en from the secure e-mail as received by said receiver; and 
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said step (c) includes receivirig-^!fmdication from said security server whether said first 
message seaj^arfcf said second message seal match, to determine whether the 
secuga^mail was altered in transit. 

19. \ The method of claim 11, wherein at least one of said steps (b) and (c) employs secure 
socket layer protocol in communications with said security service. 

20. A^system for communicating an e-mail message securely between a sender and a 
receiver, the* system comprising: 

a sena^ng unit that composes the e-mail message for the sender, wherein the e-mail 
lessage includes a body field and a receiver field containing a receiver id 
representing the receiver; 
said sendingWit including a logic that provides a sender id, a sender password, and said 

receivervid to a security server; 
said security servter including a logic that replies to said sending unit with a message id, 

which is unique for the e-mail message, and a message key; 
said security server further including a logic that stores said message id, said message 

key, and said receiver id; 
said sending unit further including a logic that encrypts the e-mail message based on said 

message key and encloses said message id therewith to form a secure e-mail; 
said sending unit yet further including a logic that e-mails said secure e-mail in 

conventional manner to tlie receiver; 
a receiving unit that accepts said secure e-mail; 

said receiving unit including a logic that provides said message id, said receiver id and a 

receiver password to said security\server; 
said security server yet further including a logic that replies to said receiving unit with 

said message key for said secure e-mai^ 
said security server still further including a logic that decrypts said secure e-mail based 
on said message key into the e-mail message such that it is readable by the 
receiver. 



